Regulatory compliance
6 packs evaluated live: SOC 2, HIPAA, PCI-DSS, CIS AWS, CIS Azure, CIS GCP.
6 packs are evaluated live against your actual Terraform plans — violations come from parsing real plan and state resources against each pack's controls, not from a static checklist. Other frameworks (GDPR, DORA, NIS2) can be evaluated as policy inputs — that's evaluation, not certification.
- Available packs: SOC 2, HIPAA, PCI-DSS, CIS AWS, CIS Azure, CIS GCP
- CIS Benchmarks: AWS, Azure, GCP
- Regional privacy laws: PDPA Singapore/Malaysia/Thailand, PDP Indonesia, Decree 53 (Vietnam)
How it works
Each framework is a set of machine-readable controls evaluated against your actual Terraform plan and state resources — not a static questionnaire. A violation means a specific resource attribute failed a specific control, traceable back to the plan that produced it.
A framework with zero violations doesn't mean an untested pass — it means every control in that framework's ruleset was evaluated against your current plan and state, and none matched a violation pattern.